Medium
CVE-2021-36864
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-40698
Quiz And Survey Master <= 7.3.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-36906
Quiz And Survey Master <= 7.3.6 - Insecure Direct Object Reference
High
CVE-2022-3632
OAuth Client by DigitialPixies <= 1.1.0 - Cross-Site Request Forgery
High
CVE-2021-36898
Quiz And Survey Master <= 7.3.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-44627
Simple SEO <= 1.8.12 - Cross-Site Request Forgery
Medium
CVE-2022-41980
Mantenimiento web <= 0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3539
Testimonials (Free <= 2.6, Pro < 1.0.7) - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
8f374eea-e6c0-4007-8855-4b1b63335775
LDD Directory Lite - <= 3.5 - Reflected Cross-Site Scripting
High
CVE-2022-36404
Simple SEO <= 1.8.12 - Cross-Site Request Forgery to Sitemap Deletion/Creation
High
CVE-2022-41685
Csomagpontok és szállítási címkék WooCommerce hez <= 1.9.0.2 - Cross-Site Request Forgery
High
CVE-2022-40128
Advanced Order Export For WooCommerce <= 3.3.2 - Cross-Site Request Forgery
Medium
CVE-2022-3578
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.1.0 - Reflected Cross-Site Scripting
High
a7372314-fff1-42c4-99b6-10d7541d1a29
Wholesale Suite <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2022-3538
Webmaster Tools Verification <= 1.2 - Missing Authorization to Arbitrary Plugin Deactivation
High
CVE-2022-3574
WPForms Pro <= 1.7.6 - CSV Injection
Critical
ff4b47d8-28c1-4706-91d9-0285f419147e
WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query
Medium
fa139703-e83e-4a19-a801-464b72a2acc4
WordPress Core < 6.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting via Comments
Medium
CVE-2022-43504
WordPress Core < 6.0.3 - Information Disclosure (Email Address)
High
ddd06190-d0c1-445d-8c6f-4c7df3248db4
WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php
High
CVE-2022-43497
WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection
Medium
CVE-2022-40696
Advanced Custom Fields <= 6.0.2 - Authenticated (Contributor+) Information Disclosure
High
CVE-2022-3415
Chat Bubble <= 2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
4394f96a-ceb5-463f-b454-a6fa4a59fc45
WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.